RE: [FW1] logging locally

[Dan Hitchcock <DHitchcock@FW1-NOSPAMbreakwatersecurity.com>]

Title: RE: [FW1] logging locally

(From information available in the FW1 Architecture and Administration guide):

Open $FWDIR/conf/masters.  It should have a single line, which is the management server's name (or IP; I'll call it 'mgmtserver-IP').  Add a second line to the file as follows:

mgmtserver-IP
+localhost

The '+' indicates that localhost is the preferred host for logging.  It will no longer log to the management server, but it will still try first to load policy from the management server.

HTH

<< NOTE TO PURISTS :)  To be precise, it is not impossible (merely extremely unlikely) that the module would ever log to itself; it would only happen if the firewall was in a bizarre state where it could inspect and send logs, but not receive them. >>

Dan Hitchcock
CCNP, CCSE, MCSE
Security Analyst
Breakwater Security Associates, Inc.
"Safe Harbor for E-Business"
dhitchcock (at) breakwatersecurity (dot) com
http://www.breakwatersecurity.com
work

The information contained in this email message may be privileged, confidential and protected from disclosure.  If you are not the intended recipient, any dissemination, distribution or copying is strictly prohibited.  If you think you have received this email message in error, please email the sender at dhitchcock@breakwatersecurity.com

-----Original Message-----
From: Chouha, Rani [mailto:rani.chouha@bofasecurities.com]
Sent: Friday, September 07, 2001 2:28 PM
To: 'fw-1-mailinglist@beethoven.us.checkpoint.com'
Subject: [FW1] logging locally

How can I redirect logging to be locally on the fw module instead of to the
management station ? (I do not want any logs sent to the management
station). If I put "localhost" as the first line in the masters file this
will cause the firewall module to download the policy from localhost first
which I do not want to do.

Rani

_____________________________________________________________________
IMPORTANT NOTICES:
          This message is intended only for the addressee. Please notify the
sender by e-mail if you are not the intended recipient. If you are not the
intended recipient, you may not copy, disclose, or distribute this message
or its contents to any other person and any such actions may be unlawful.

         Banc of America Securities LLC("BAS") does not accept time
sensitive, action-oriented messages or transaction orders, including orders
to purchase or sell securities, via e-mail.

         BAS reserves the right to monitor and review the content of all
messages sent to or from this e-mail address. Messages sent to or from this
e-mail address may be stored on the BAS e-mail system.

================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================